635127 matches found
CVE-2026-55365
In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-55331
In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-55343
In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2026-55318
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-55317
In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-55302
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-19886
OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target...
CVE-2026-19885
OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the targ...
CVE-2026-19774
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in...
CVE-2026-19773
libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit this vulnerability. The specific flaw...
CVE-2026-19781
Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targe...
CVE-2026-0171
In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0159
In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2019-12735-VIM-NEOVIM
CVE-2019-12735-VIM-NEOVIM USAGE: 前提需要开启modeline功能 普通用户的modeline功能默认开启，而root用户是默认关闭的。 使用echo &modeline 查询开启情况 1为开启 0为关闭 若没有则可以在/.vimrc没有该文件自行创建即可中加入set modeline即可 自行写入需要考虑 转义字符x1b是非显示字符 想要修改第二段利用代码，简单的方法是下载源文件，修改执行命令的部分，也可以使用二进制编辑器自行写入或修改。 poc.txt: vim poc.txt shell.txt: nc -lvp 9999 vim shell.txt...
CVE-2017-5638-Apache-Struts2
CVE-2017-5638 Apache Struts2 CVE-2017-5638 的 PoC 利用 PHP 代码示例 用法 php exploit.php "http://127.0.0.1:8080/example/index.action" "command" 使用风险自负...
CVE-2017-0781
CVE-2017-0781 PoC Descripción general Esta es una implementación de la vulnerabilidad de desbordamiento de montículo heap overflow en Android CVE-2017-0781, descrita en el libro blanco de Blueborne publicado por Armis. Lectura adicional: https://www.armis.com/blueborne/ En el estado actual, este...
CVE-2022-47986
CVE-2022-47986 Aspera Faspex RCE sin autenticación previa https://blog.assetnote.io/2023/02/02/pre-auth-rce-aspera-faspex/ Uso del PoC: root@kitploit: python3 poc.py https://xxxxx whoami...
CVE-2022-43571
CVE-2022-43571 CVE-2022-43571 Splunk RCE: mi viaje personal para dar color a tu vida Solo porque recibí la declaración de mi departamento de TI de que no hay motivos para una actualización de SPLUNK, analicé esta vulnerabilidad CVE-2022-43571 para demostrar lo contrario en cuanto a la ejecución...
CVE-2021-22911
Exploit actualizado para CVE-2021-22911 Rocket.Chat 3.12.1 - Inyección NoSQL a RCE sin autenticación créditos originales para : https://www.exploit-db.com/exploits/50108 Configuración Crear un entorno virtual de Python e instalar dependencias root@kitploit: $ python -m venv venv $ source...